Fix/secrets policies (#74)

telia-oss · Oct 17, 2022 · f021b23 · f021b23
1 parent 5d6d4b9
commit f021b23
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/policies.tf b/policies.tf
@@ -91,7 +91,7 @@ data "aws_iam_policy_document" "task_container_secrets" {
 
     resources = concat(
       [data.aws_kms_key.task_container_secrets_key.arn],
-      [for i in var.task_container_secrets : i["valueFrom"]]
+      [for i in var.task_container_secrets : replace(i["valueFrom"], "/:[^:]+::$/", "")]
     )
     actions = [
       "secretsmanager:GetSecretValue",